CVE-2024-11510

Summary

CVE-2024-11510 is a stack-based buffer overflow vulnerability affecting IrfanView's WBZ plugin (WB1 file parser). This issue allows remote attackers to execute arbitrary code on targeted installations by exploiting insufficient validation of user-supplied data. The vulnerability is triggered when the plugin parses WB1 files, leading to uncontrolled data copying into a stack-based buffer. To exploit the vulnerability, an attacker needs the target to visit a malicious webpage or open a malicious file. This vulnerability, initially reported as ZDI-CAN-22718, can result in code execution in the context of the current process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.